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PLAIN TEXT RADIATION STUDY OF TSEC/KL-7 
(AFSAM 7) 

GENERAL 

The TSEC/KL-7 is a literal cipher machine designed for off-line 
use. It can encipher or decipher at any speed up to 60 words per minute 
and can be operated by either keyboard or punched tape input* The 
enciphered and deciphered text is printed on gummed paper tape* 

The print wheel on the TSEC/XL-7 rotates continously, therefore 
it employs the "print-on-the fly" method* The print hammer is activated 
by- the print magnet. The objective >of this analysis was to determine 
what information could be obtained from the radiated signal from the 
print magnet. Mr. Collins, KSA311, has indicated that the print-magnet 
signal is detectable approximately 25 feet from the equipments For 
this analysis the signal was picked up from a direct connection to the 
print magnet. 

The print wheel is directly connected to the motor and any 
variation in motor speed causes a corresponding change in the speed of 
the print wheel. A second objective was to determine the variation in 
the motor speed for a given massage, the primary cause of this variation, 
and how the shunt wound motor, now used on TSEC/KL-7, compared with a 
governed motor in respect to these features. 

ANALYSIS 

Tape input was employed for the analysis. The information to be 
analysed (plain text) was punched on tape and 'this tape was enciphered 
through the machine, printing the cipher text on gunned paper tape* 
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mils cipher text was then used to pinch a second tape which was 
deciphered through the machine* It is during this deciphering operation 
that plain-text- radiation from the print magnet is present • This plain- 
text signal, along with a one kc (kilocycle) sine wave, was filmed 
from a dual beam scope* The number of cycles of the one kc signal was 
counted, determining the time Interval between consecutive print-outs* 

For the initial analysis a typical military message of approximately 
70 characters was filmed* The intervals between print-out were recorded. 
Figure I. The speed of the print wheel, given in the maintenance manual 
for TSEC/KL-7, is 2200 rpm. The time per revolution of the print wheel 
is 27*27 ms (milliseconds). Since there are JB characters on the 
periphery of the print wheel, 0*7177 bs are required for each character 
to pass the print banner* 

The interval readings were reduced modulo 27*27, the time for one 
revolution, leaving a residue which is the number of milliseconds past 
the previous character printed. These time intervals were converted 
to the corresponding number of characters by dividing by 0*7177* At 
this point, given the print-wheel sequence (Figure 3) and the first 
character of the message, theoretically the entire message could be 
read without any difficulty; but because of variation in the speed of 
the print wheel, the number of characters from the film residue vary 
from the actual number as given by the message* 

Mrs. Esther Cox, NSA-314, analysed this data by assuming -possible 
words and trying to fit them to the sequence of residues* After several 
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hours she was unable to recover any portion of the massage* Further 
study was made on this message by comparing the calculated residue 
with the film rbsidue; this was done by subtracting the film residue 
from the calculated residue. Figure I* (The calculated residue is 
determined by multiplying the time per character by the Interval on 
the print wheel for successive pairs of characters of the massage.) 
This difference showed an average bias of 2*163 ms, or approximately 
three characters* When this bias was removed by adding - 2.163 ms 
to each film residue, Mtb. Cox was still unable to recover the plain 
text after three hours* In order to speed up the analysis, because of 
Mrs. Cox's resignation, she was given three probable words, one of 
which was contained in the message* In a short time she recovered the 
remainder of the mBSsage* 

A second set of films was run to obtain information about the 
variation in motor speed* Two different motors were used, the shunt 
wound motor now used on the TEC/KL-7, and a governed motor* Two 
pairs of films were run, that is, the same material was deciphered 
using each motor; these pairs were compared. The paira were (1) 
decipherment of all spaces, and (2) decipherment of a message* Over 
the operating range 21 to 31 volts the shunt wound motor speed could 
vary to the extent that it oaused the print wheel to be in an improper 
position when the print hammer would strike, thus producing unclear or 
Improper print-outs* The use of a governed motor would be a solution 
to this problem, if it did not seriously effect the security of the 
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equipment. With this in mind further analysis was carried out, and 
is included in the remainder of this report* 

In the comparison of the first pair of messages (all spaces) 
the objective was to determine variations in motor speed. The 
decipherment of enciphered spaces was used so that the print wheel 
would make an integral number of revolutions between print-outs; 
therefore the only difference in time between prints would be due to 
variation in motor speed. The analysis of the shunt wound motor 
Indicates the average time between print-outs is 185.2 ms, with a range 
from 182.0 ms. to 188.0 ms. This is a variation of approximately 
k 1/2 characters from the mean. The 185.2 ms represents 7 
revolutions, or 26.46 ms per revolution, which gives an average 
print-wheel speed of 2269 rpm, whereas the maintenance manual 
indicates 2200 rpm. If at the beginning of a message several repetitions 
of one character (say space) were enciphered; this, whan deciphered, 
would be valuable in calculating the print-wheel speed, which would be 
ta much closer approximation than the speed given in the manual, thus 
Improving the analysis. 

Using the governed motor the average time between print-outs wae 
190.0 ms, with range from 189. 5 ms to 190*5 ms. ThiB is a variation 
of less than one character from the mean. Actually this variation mtiy 
be less since part of it could be caused by the fact that it was 
difficult to read the film more accurately than 0.5 ms. 

A second message was filmed when the TSEC/KL-7 was operated by 
the shunt would motor. The data is recorded in Figure 2. It say be 
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observed that the first 21 readings era either approximately 183 ms 
or approximately 214 ms, indicating that the same character had been 
deciphered, and the print wheal made respectively 7 or 8 revolutions. 

( 188 ms corresponds approximately to 7 revolutions of the print wheel 
where the 2200 rpm speed given by the manual is used.) These first 21 
readings were averaged and the print-wheel speed was calculated to be 
2239 rpm, resulting in 26.81 ms per revolution and 0.7053 ms per 
character. 

Analysis of this mss sage was done by Miss Teresa Mimeau, NSA-314. 

The solution method was based on the theory that, if all the intervals 

between print-outs had been the true distance between plain letters, 

the plain text could be recovered in the following way. 

Consider the print wheel in terms of the location of its letters 

(Figure 3). Then, given the successive intervals (ip ig, iy i R 

where n is the number of letters in the message) between printed 

characters, which is the film residue in number of characters in Figure 2, 

choose an arbitrary location on the print wheel for the logical first 

letter of the message (say at position 0, which is a "space") • Derive 

the numerical sequence composed of partial sums ip i^ ♦ 

4+i + i, i + l 5 +,,,,+i n ^ nod se< D ience mill 

*1 2 3 12 

represent the locations, each varying by 8 constant, reflecting the 
distance from the chosen first letter to the true one, on the print 
wheel, of corresponding letters of plain text. Convert that sequence 



to the corresponding literal values from the known print wheel, mixed 
alphabet. That stream becomes the "pseudo-plain text." Let that "plain" 
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be the first row of a matrix 38 cells deep* Each succeeding row 
will be a slide of one from the proceeding sequence, where the first better 
of each row is assumed to have been one letter beyond that of the row 
above, for all possible 38 first letter assumptions. In other words, 
each column becomes an inscription of the print-wheel alphabet, beginning 
with the letter designated in row one and continuing cyclically to row 
38* The row beginning with the correot first letter will then contain 
the actual plain text, assuming that the original intervals were exact, 
that is there was no variation in speed of the print wheel* 

In actuality, it was necessary to contend with a degree of variance 
which required making up the full matrix and scanning all its rows for 
portions which were words, or resembled part-words* Once such a 
segment was located, attempts were Bade to extend hori sonially the 
portion in both directions, by considering the adjacent columns as 
possibly displaced a few positions up or down, i.e. searching for 
good text continuing in the rows nearby* From previous analysis it 
was found that a jump of five rows wau possible, but several jumps of 
five, or jumps greater than five appeared to be unreasonable* Several 
apparent possibilities extended for a stretch hut had to be discarded 
when unreasonable "jumps" (errors in computed intervals) made con- 
tinuance unfeasible* When the correct text was hit upon it could 
be extended the entire width of the matrix without having to jump 
too many rows between any two columns. Approximately 30 hours were 
required to complete the entire analysis of this message* 
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Figure U lists the date from a filmed message where the governed 
motor was used on the TSEC/KL-7- This message was also analysed by 
Miss Mimeau, using the same method as previously indicated* An 
approximation for the print-wheel speed was obtained from previous 
data, where the decipherment of "all spaces" was filmed using this 
same motor; the print-wheel speed was 2217rpm, or 27*06 ms per 
revolution and 0*7122 ms per character. Notice in Figure 5 how closely 1 
the film residue and calculated residue agree* As a result, when the 
first few columns of the matrix were Written out, it was obvious which 
row contained the message. 

Since the variation was small, it was only necessary to write out 
several rows above and below the row that theoretically contained the 
messages* The complete analysis for this message required two hours* 

Up to this point it has been determined that the speed of the 
governed motor is constant enough to enable easy reading of a message, 
whereas the shunt wound motor has greater variation in speed, making 
analysis more difficult* 

It was suspected that the variation in motor speed was a function 
of the number of rotors that stepped. To verify this the message 
indicator was set up on the machine, and each successive setting was 
recorded; from this the motion for each decipherment was determined, 
giving the number of rotors stepping for each encipherment* This 
sequence of numbers was properly aligned with the variations (calculated 
residue minus film residue. Figure 2), and it may be observed that there 
ts high correlation between the number of rotors that step and the 

LIBRARY NO £60,061 

T O P fUm T-COIfTWl Bll 
COPY 




UKUSA-344 




Tor QEcrasT - 

print-wheel speed; that is, when the maximum number of rotors step 
there is a large negative deviation from the mean in print-wheel speed* 
and when the minimum number of rotors step the deviation from the mean 
speed is positive. It nay be possible* with more precise recording and 
measuring devices, to get accurate Information on the number of rotors 
that step. 

For this analysis tape input was used* thus making the time Intervals 
between print-outs relatively constant; that is* the print wheel would 
make 6 or 7 revolutions plus the distance it had to go from the previous 
character printed to the next one to be printed. If keyboard operation 
were employed, the number of revolutions of the print wheel would 
vary a great deal* due to the irregularity in typing speed of the 
operation. This would cause the variation in print-wheel speed to have 
more influence, adding to the difficulty of the analysis. 

CONCLUSION 

The print magnet on the TSEC/KL-7 radiates a signal which is 
detectable approximately 25 feet from the equipment. During the 
deciphering operation the signal indicates the plain text that is being 
printed on the gummed paper tape. Analysis of this signal* recorded 
during decipherment* showed that the plain text could be recovered. 

When the shunt wound motor was used on the equipment approximately 30 
hours were required to recover the plain text by hand methods. When 
a governed motor was used only 2 hours were required to recover 
plain text because of the regularity of the print-wheel speed . 
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Mr* Joseph Collins, NSA-311, indicated that available through 
radiation, and detectable at the same distance as the prirrt-magnet 
signal, is information that would enable us to determine the change 
in print*wheel speed between print-outs. With this information 
available the analysis would be trivial. 

It has been determined that there is a high correlation between 
the number of rotors stepping and the variation in the speed of the 
print wheel. 

Massages deciphered by keyboard input rather than punohed tape, 
used in the previous analysis, would be more difficult to analyse 
due to longer Intervals between characters allowing more accumulated 
variation in the print-wheel speed. 
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A 


B 


C 


D 


E 


F 




Character 


Film 


Film 


Calculated 


Column E 


Text of 


Intervale on 


Readings 


Residue 


Residues 


Minus 


Message 


Print Wheel 


(ms) 


... (ms) 


(ms) 


.Column D 


T 


11 


204.5 


10.8 


12.4 


- 1.6 


H 


7 


m. 5 


8.5 


5.1 


- 3.4 


R 


2 5 


210.0 


16.3 


18.2 


1.9 


E 


36 


193.0 


27.0 


26.2 


- 0.8 


E 


0 


194.0 


0.3 


0 


- 0.3 




29 


188.0 


22.0 


21.1 


- 0.9 


P 


2 


197.5 


3.8 


1.5 


- 2.3 


L 


31 


192.0 


26.0 


22.6 


» 3*4 


A 


30 


192.0 


26.0 


21.8 


- 4.2 


N 


4 


172.5 


6.5 


2.9 


- 3.6- 


E 


18 


205.0 


11.3 


13.1 


1.8 


S 


18 


206.0 


12.3 


13.1 


0.8 




11 


178.5 


12.5 


8.0 


- 4.5 


3 


27 


190.0 


24.0 


19.7 


- 4.3 


I 


21 


185.5 


19.5 


15.3 


- 4.2 


6 


16 


205.5 


11.8 


11.7 


- 0.1 


H 


36 


195.0 


1.3 


26.2 


- 2.8 


T 


31 


192.0 


26.0 


22.6 


- 3.4 


E 


30 


191.0 


25.0 


21.8 


- 3.2 


D 


21 


183.5 


17.5 


15.3 


- 2.2 




8 


199.0 


5.3 


5*8 


0.5 


F 


28 


189.0 


23.0 


20.4 


- 2.6 


L 


5 


199.0 


5.3 


3.6 


- 1.7 


I 


23 


187.0 


21.0 


16.8 


— 4.2 


I 


30 


192.0 


26.0 


21.8 


- 4.2 


N 


19 


206.5 


14.8 


13.8 


- 1.0 


G 


35 


169.0 


3.0 


25.5 


- 5*2 




12 


204.0 


10.3 


8.7 


- 1.6 


L 


33 


193.0 


27.0 


24.0 


- 3.0 


0 


9 


201.5 


7.8 


6.6 


- 1 A 


W 


37 


170.0 


4.0 


26.9 


- 4.8 




35 


219.0 


25.3 


25.5 


0.2 


0 


4 


175.0 


9.0 


2.9 


- 6.1 


V 


32 


190.0 


24.0 


23.3 


- 0.7 


E 


11 


201.5 


7.8 


8.0 


0.2 


R 


2 


196.0 


2.3 


1.5 


— 0.8 



Figure 1. 

(Continued on page 11) 
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TOP SECRE T- RECORDED DATA AND CALCULATIONS FROM FILM OF DECIPHERED 
MESSAGE. THE SHUNT WOUND MOTOR WAS USED ON THE EQUIPMENT. 

A B C D E F 



Text of 
Message 


Character 
Intervals on 
Print /fheel 


Film 

Readings 

(ms) 


Film 

Residue 

(ms) 


Calculated 

Residues 

(ms) 


Column B 

Minus 

Column 




27 


188.0 


22.0 


19.7 


- 2.3 


B 


34 


195*0 


1.3 


24.8 


- 4.2 


A 


29 


190.0 


2A..0 


21.1 


- 2w9 


T 


31 


190.0 


24.0 


22.6 


* 1.4 




20 


183. 0 


17.0 


14.6 


- 2.4 


S 


27 


213.0 


19.3 


19.7 


0.4 


T 


28 


188.0 


22.0 


20.4 


- 1.6 


0 


25 


187.0 


21.0 


18.2 


- 2.8 


P 


36 


194.0 


0.3 


26.2 


- 1.8 




36 


194.0 


0.3 


26.2 


- 1.8 


P 


2 


198.0 


4.3 


1.5 


- 2.8 


R 


9 


177.0 


n.o 


6.6 


- 4.4 


E 


36 


194.0 


0.3 


26.2 


- 1.8 


S 


18 


206.0 


12.3 


13.1 


0.8 


u 


23 


184.5 


18.5 


16.8 


- 1.7 


M 


19 


184.0 


18.0 


13.8 


- 4.2 


A 


32 


193.0 


27.0 


23.3 


- 3.7 


B 


9 


203.5 


9.8 


6.6 


- 3.2 


L 


37 


195.5 


1.8 


26.9 


- 2.2 


Y 


23 


185.5 


19.5 


16.8 


- 2.7 




20 


183.5 
Figure 1. 


17.5 


14.6 


- 2.9 
- 123.3 - 



Total 

bias 



Motor speed assumed - 2200 rpra 
27*67 ms per revolution of print-wheel 
0.728 ms per character 

6 revolutions of print wheel ■ 166.0 ms 

7 revolutions of print- wheel - 193*7 ms 

8 revolutions of print- wheel - 221.3 ms 
— 123.3 

■ " - 2.163 ms average bias per letter of message. 



2 * l6 3... - 2.97 characters, average bias per letter of message. 
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THE SHUNT WOUND MOTOR WAS USED ON THE EQUIPMENT. 




A 


B 


C 


D 


E 


F 


G 


H 








Film 


M 


Actual 








Film 


Filin 


Residue 


E 


Residue 


Column F 


Number 




Readings 


Residue 


(Number of 


S 


(Number of 


Minus 


of Rotors 


Intervals 


-(ms) 


Isp 


Characters) 


S 

a 


Characters) 


Column D 


Stepping^ 


1 


214.0 


26.4 


37 


A 

G 


0 


1 


3 


2 


188.0 


0.4 


1 


E 


0 


- 1 


5 


3 


188.5 


0.9 


1 




0 


- 1 


5 ‘ 


4 


188.5 


0.9 


1 




0 


- 1 


5 


5 


189.5 


1.9 


3 




0 


- 3 


5 


6 


189.5 


1.9 


3 




0 


*• 3 


6 


7 


213.5 


25.9 


37 




0 


1 


3 


8 


186.0 


25.2 


36 




0 


2 


3 


9 


187.0 


26.2 


37 




0 


1 


5 


10 


186.5 


25.7 


36 




0 


2 


3 


11 


213.0 


25.4 


36 




0 


2 


4 


12 


185.5 


24.7 


35 




0 


3 


3 


13 


186.5 


25.7 


36 




0 


2 


4 


1 4 


188.0 


0.4 


1 




0 


- 1 


5 


15 


186.5 


0.9 


1 




0 


- 1 


5 


16 


215.0 


0.6 


1 




0 


- 1 


5 


17 


186.0 


25.2 


36 




0 


2 


3 


18 


187.0 


26.2 


37 




0 


1 


4 


19 


187-5 


26.7 


0 




0 


0 


4 


20 


189.5 


1.9 


3 




0 


- 3 


6 


21 


217.0 


2.6 


4 




0 


- 4 


5 


22 


176.0 


15.2 


22 


T 


17 


- 5 


6 


23 


193.0 


5.4 


8 


H 


7 


- 1 


3 


24 


205.5 


17-9 


25 


E 


23 


- 2 


5 


25 


182.5 


21.7 


31 




29 


- 2 


6 


26 


207.5 


19.9 


28 


A 


25 


- 3 


5 


27 


192.5 


4.9 


7 


L 


8 


1 


3 


28 


186.5 


25.7 


36 


L 


0 


2 


4 


29 


197.5 


9.9 


14 


I 


15 


1 


4 


30 


187.5 


26.7 


38 


E 


37 


- 1 


5 


31 


175.5 


14.7 


21 


S 


18 


- 3 


6 


32 


197.0 


9.4 


13 




11 


- 2 


5 


33 


207.5 


19.9 


28 


A 


25 


- 3 


5 


34 


177.0 


16.2 


23 


R 


24 


1 


4 


35 


188.0 


0.4 


1 


E 


36 


- 3 


6 



Figure 2* 
(Continued on page 13) 
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TOP SECRE T- RECORDED DATA AND CALCULATIONS FROM FILM OF DECIPHERED MESSAGE. 







THE SHUNT WOUND MOTOR WAS USED ON THE EQUIPMENT. 




A 


B 


C 


D 


E 


F 


G 


H 








Film 


M 

E 


Actual 








Film 


Film 


Residue 


S 


Residue 


Column F 


Number 




Readings Residue 


(Number of 


S 


(Number of 


Minus 


of Rotors 


Intervale 


log) 


- iiSi) 


Characters) A 
G 


Characters) 


Column D 


Stepping 


36 


208,0 


20.4 


29 


E 


29 


0 


4 


37 


200.5 


12.9 


18 


T 


17 


- 1 


5 


3 e 


178.5 


17.7 


25 


0 


25 


0 


4 


39 


186.0 


25.2 


36 




34 


- 2 


6 


40 


198.5 


10.9 


15 


R 


11 


- 4 


6 


41 


185.5 


24.7 


35 


E 


36 


1 


3 


42 


200.0 


12 . A 


18 


F 


19 


1 


4 


43 - 


201.5 


13.9 


20 


R 


21 


1 


4 


44 


198.0 


10.4 


15 


A 


14 


- 1 


5 


45 


179.0 


18.2 


26 


I 


23 


- 3 


6 


46 


202.0 


14.4 


20 


N 


19 


- l 


5 


47 


192.5 


4.9 


7 




9 


2 


3 


48 


182.5 


'21.7 


31 


F 


28 


- 3 


6 


49 


202.5 


14.9 


21 


R 


21 


0 


4 


50 


182.0 


21.2 


30 


0 


31 


1 


4 


51 


205.0 


17.4 


25 


M 


27 


2 


4 


52 


190.0 


2.4 


3 




7 


4 


3 


53_ 


182.5 


21.7 


31 


D 


30 


- 1 


5 


54 


200.0 


12.4 


18 


E 


17 


- 1 


5 


55 


202.5 


14.9 


21 


M 


22 


1 


4 


56 


183.0 


22.2 


32 


A 


32 


0 


5 


57 


189.5 


1.9 


3 


N 


4 


1 


4 


58 


187.0 


26.2 


37 


D 


1 


2 


4 


59 


212.0 


24.4 


35 


S 


35 


0 


5 


60 


195.5 


7.9 


11 




11 


0 


6 


61 


193.0 


5.4 


8 


0 


4 


- 4 


6 


62 


193-5 


5.9 


8 


R 


7 


- 1 


5 


63 


178.5 


17-7 


25 
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Motor speed calculated from film of "all spaces" filmed using the 
governed motor - 2217 **]»• 

27.06 me per revolution of print-wheel 
0*712 me per character 

6 revolutions of print wheel ■ 162*4 me* 

7 revolutions of print wheel - 189*4 ns* 

6 revolutions of print wheel - 216*4 ms 

0.166 ms average bias per letter of message. 

- - 0.233 character, average bias per letter of message* 

0.712 
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